Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: 97sE55UL8VynUi/wiT2ux9TS7NQbWami4XHWf3uMxXw=
Subject key identifier: C6:50:24:0E:74:F7:86:14:01:17:EB:9D:0D:58:D8:81:6E:98:70:01
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 01964D46E2325EC6D7434D1A7A1E6DD05DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 017B
Signing time: Sat 19 Apr 2025 09:00:12 +0000
Manifest this update: Sat 19 Apr 2025 09:00:12 +0000
Manifest next update: Sun 20 Apr 2025 09:00:12 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: 1Ia6EFvJR9+TXIpfEpyB3JLZM8OxtBQIDT6JFF97+x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:46:e2:32:5e:c6:d7:43:4d:1a:7a:1e:6d:d0:5d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Apr 19 09:00:12 2025 GMT
Not After : Apr 20 09:00:12 2025 GMT
Subject: CN=c650240e74f786140117eb9d0d58d8816e987001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:14:75:ea:c0:ba:0b:eb:51:e5:f9:a4:70:d0:
d8:4d:0a:a9:4d:76:0c:2b:4a:dd:6f:f9:59:b5:2c:
9c:d2:e6:8a:1c:74:ff:14:dd:9f:7b:86:75:fe:37:
32:ff:d3:54:c5:8f:86:0b:f8:87:f8:da:04:c5:00:
dd:ac:a5:cc:5d:63:b9:21:a8:31:b4:47:8e:f9:7c:
89:52:9d:89:e8:7e:ba:a5:7c:b4:8b:ee:d0:ad:e8:
9f:8a:94:81:ab:48:37:81:5b:00:51:48:31:96:4d:
b2:a1:95:2c:02:73:fe:51:74:f3:7b:3f:64:ff:6f:
ef:27:b6:4d:e7:75:5a:1f:96:93:87:50:25:05:3b:
b9:23:82:68:78:11:4a:01:82:27:be:89:05:29:60:
ac:18:54:17:3e:a0:88:1c:db:ec:be:58:16:7c:3c:
42:88:0c:21:09:d9:b3:8c:61:b1:40:5e:74:92:60:
8a:67:82:91:79:bf:f5:27:4d:82:ab:dd:a6:43:cb:
11:c8:9f:19:bb:40:86:8e:af:b2:b7:0b:34:9c:3f:
44:c7:63:5a:42:24:0f:b8:03:97:09:94:ce:a4:0b:
0a:62:30:3a:f6:d1:b9:43:f4:b0:ef:e2:ce:7c:36:
86:c7:73:39:87:9a:e6:52:66:f0:19:55:f7:a4:01:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:24:0E:74:F7:86:14:01:17:EB:9D:0D:58:D8:81:6E:98:70:01
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:07:40:1d:16:2c:8d:fd:fe:21:34:88:8e:d8:fd:09:3a:48:
8b:6d:8a:34:02:e4:49:92:6b:5f:e8:a8:da:0f:21:bc:b6:57:
fe:38:e8:96:f8:d8:a2:58:b8:5b:63:7a:ad:96:59:b2:35:ad:
d9:bd:6a:39:0f:6b:20:b8:76:10:01:8c:b4:24:02:0a:c2:52:
84:39:d8:c7:40:b6:71:e7:ec:97:f7:dd:eb:7a:db:e4:17:71:
28:12:7e:b7:3a:26:e7:76:d6:09:44:a2:6c:7e:fe:ae:71:ee:
70:52:52:bd:97:c8:7f:6f:a6:00:cd:24:d9:23:3f:2f:ba:ad:
3f:75:94:ff:d2:ea:72:01:88:7a:c3:54:ef:9b:42:d8:4b:96:
c2:db:63:1f:4a:2c:a3:bb:29:c6:51:38:3a:a5:8d:68:14:bf:
74:42:c2:c1:ad:69:7b:c3:a4:a3:bf:23:6c:79:ab:bb:de:d9:
11:e0:e3:bd:26:5c:ce:89:c9:ac:18:e0:b2:fa:b3:1b:94:6a:
d7:fe:20:64:66:5e:2a:f3:ca:4b:e8:31:d8:5b:13:e4:53:8a:
53:26:c7:49:ec:a0:d5:3d:a0:f0:df:b8:f6:db:60:d1:1b:c3:
2c:cc:1a:f9:95:3f:53:0d:b0:12:9e:1e:37:bc:23:27:30:50:
ed:16:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:27 2025 by rpki-client